Critical severity9.1NVD Advisory· Published Aug 3, 2023· Updated Jun 17, 2026
CVE-2023-37364
CVE-2023-37364
Description
In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution. This allows context-dependent attackers to read arbitrary files or cause a denial of service, a similar issue to CVE-2013-4152.
Affected products
2- WS-Inc J/WBEM Serverdescription
- Range: <4.7.5
Patches
Vulnerability mechanics
References
2- ws-inc.com/security.htmlnvdVendor Advisory
- ws-inc.comnvdProduct
News mentions
0No linked articles in our index yet.